Privacy Policy
Last updated: 2026-04-11
BandPlace is a product of Mahdi Hezaveh IT Consulting (operating under the brand name "Empinet").
This Privacy Policy explains how we collect, use, and protect your personal data when you use band.place.
1. Data Controller
Mahdi Hezaveh IT Consulting
Owner: Mahdi Hezaveh
Erkrather Str. 401
40231 Düsseldorf
Germany
Email: [email protected]
We are the data controller within the meaning of the General Data Protection Regulation (GDPR).
2. Data We Collect
a) Server Log Data
When you visit this website, our server automatically processes:
- IP address
- Browser type and version
- Operating system
- Referrer URL
- Date and time of request
- Requested pages
This processing is necessary to ensure the security and stability of the website.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest).
b) Waiting List / Email Signups
If you join the BandPlace waiting list, we collect:
- Your email address
Your email address is used exclusively to:
- Inform you about the launch of BandPlace
- Send relevant product updates
We do not sell or share your email address with third parties.
Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures).
You may unsubscribe at any time by contacting [email protected].
c) Account & Payment Data
If you create an account or subscribe to a paid plan, we process:
- Name
- Email address
- Account data
- Subscription status
- Payment-related information
Payments are processed via Stripe. We do not store full credit card details on our servers.
Legal basis: Art. 6(1)(b) GDPR (performance of a contract).
3. Payment Processing (Stripe)
Payments are processed by:
Stripe, Inc.
510 Townsend Street
San Francisco, CA 94103
USA
Stripe processes payment data on our behalf. Data may be transferred to the United States. Stripe uses Standard Contractual Clauses (SCCs) and other safeguards to ensure an adequate level of data protection.
For more information, see: https://stripe.com/privacy
4. Hosting
This website is hosted on a dedicated server operated by:
Hetzner Online GmbH
Industriestr. 25
91710 Gunzenhausen
Germany
Hetzner processes server log data on our behalf.
A data processing agreement pursuant to Art. 28 GDPR has been concluded.
5. Cloudflare (DNS & Proxy)
We use Cloudflare, Inc. as a DNS provider and reverse proxy:
Cloudflare, Inc.
101 Townsend St
San Francisco, CA 94107
USA
Cloudflare processes IP addresses and technical traffic data in order to provide DNS resolution, caching, and security services.
Data transfers to the USA are safeguarded through appropriate legal mechanisms, including Standard Contractual Clauses.
More information: https://www.cloudflare.com/privacypolicy/
6. Google Analytics
We use Google Analytics, a web analytics service provided by:
Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland
Google Analytics uses cookies and similar technologies to analyze website usage.
We use IP anonymization where available.
Google may process data in the United States. Data transfers are safeguarded by Standard Contractual Clauses.
Legal basis: Art. 6(1)(a) GDPR (consent).
Google Analytics is only activated after you provide consent via our cookie banner.
You may withdraw your consent at any time.
More information: https://policies.google.com/privacy
7. Data Retention
We retain personal data only as long as necessary:
- Waiting list emails: until launch or until you unsubscribe
- Account data: as long as the account exists
- Billing data: according to statutory retention obligations
- Server logs: limited retention for security purposes
8. Your Rights Under GDPR
You have the right to:
- Access your data (Art. 15 GDPR)
- Rectification (Art. 16 GDPR)
- Erasure (Art. 17 GDPR)
- Restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Object to processing (Art. 21 GDPR)
- Withdraw consent at any time
To exercise your rights, contact: [email protected]
You also have the right to lodge a complaint with a supervisory authority.
9. Security
We implement appropriate technical and organizational measures to protect your data against:
- Unauthorized access
- Data loss
- Misuse
- Disclosure
However, no system can guarantee absolute security.
10. Changes to This Policy
We may update this Privacy Policy from time to time.
The current version is always available on this page.